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What is claimed is: 

+^ An aggregated visual local area network (VLAN) architecture system 
comprising: 

a metropolitan area netyork MAN having at least one of a router and a 

switch; 

an edge switch connecting the MAN to a super-VLAN, the super-VLAN 
comprising at least one of a plurality of sub-VLANs, and wherein the edge switch 
applies a modified bridge forwarding rulV to exchange a VLAN ID associated with 
the sub-VLAN for a VLAN ID associated with the super-VLAN before forwarding a 
data packet from the sub-VLAN over the MAN\^ing the at least one of a router and 
a switch. 



VLAN architecture of claim 1, wherein the edge switch further 
bridge media access control (MAC) address learning rule to 
ta packet from the sub-VLAN from being forwarded to a different sub- 
M/^C address learning rule comprising a MAC address entry in a 
datia base (FDB) for each of the plurality of sub-VLANs and the super- 



The aggregated 

2 applies a modified 

3 prevent the ds 

4 VLAN, the 

5 forwarding 

6 VLAN. 



2 
3 



The aggregated VLAN architecture of claim 2, wherein the MAC address entry 



is added to the 



FDB for the sub-VLAN and the super-VLAN when a new MAC 



address is learned from the sub-VLAN. 
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4. The aggregated VLAN architecture of claim 3, wherein the MAC address entry 
is added to the RDB for each of the plurality of sub-VLANs and the super-VLAN when 
the new MAC address is learned from the super-VLAN. 



5. The 
the modified 
super-VLAN for 
packet from the 



aggregated VLAN architecture of claim 1, wherein the edge switch applies 
bridge forwarding rule to exchange a VLAN ID associated with the 
a VLAN ID associated with the sub-VLAN before forwarding a data 
uper-VLAN to a customer associated with the sub-VLAN. 



1 6. The aggregated VLAN architecture of claim 1 , wherein the VLAN ID 

2 associated witW the sub-VLAN is obtained from a header encapsulating the data 
V!H 3 packet. 

1 7. The aggregated VLAN architecture of claim 6, wherein the header 

2 encapsulating the data packet is an 802. 1Q frame tag. 



1 8. The 

2 associated wi 

3 packet. 



aggregated VLAN architecture of claim 5, wherein the VLAN ID 
th the super-VLAN is obtained from the header encapsulating the data 



1 9. The aggregated VLAN architecture of claim 8, wherein the header 

2 encapsulating the data packet is an 802.1 Q frame tag. 



1 1 0. The aggregated VLAN architecture of claim 1 , wherein the VLAN ID 

2 associated witp the sub-VLAN is obtained from an internal value stored in the edge 

3 switch. 



Yip et al. - Method and System to Aggregate Multiple VLANs in a MAN 
EL034438983US 

-17- 



DJC/mwb 



~'4 



1 

2 
3 

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 

1 
2 
3 
4 



Attorney Docket Ref: 



7.P030 



1 1 . The aggregated VLAN architecture of claim 1 , wherein the VLAN ID 

iated with 
the edge switch 



associated with the super-VLAN is obtained from a second internal value stored in 



12. A method of aggregating 
comprising: 

classifying a data packe 



nultiple VLANs in a metropolitan area network 



originating from a sub-VLAN in accordance with an 



aggregated VLAN configuration the aggregated VLAN configuration associating the 
sub-VLAN with a sub-VLAN ID and a super-VLAN ID; 

exchanging the sub-VL^N ID for the super-VLAN ID before forwarding the 
data packet to a MAN; 

classifying a data packet originating from a super-VLAN in accordance with the 
aggregated VLAN configuration, the aggregated VLAN configuration further 
associating the super-VLAN with a super-VLAN ID and at least one of a plurality of 
sub-VLAN IDs; 

exchanging the super-VLAN ID for the at least one sub-VLAN ID before 
forwarding the data packet to a customer associated with the at least one sub-VLAN 
ID. 

13. The method of claim 1£, wherein the classification comprises obtaining the 
sub-VLAN ID and the super-VLAN ID from a tag in the data packet, and verifying the 
obtained VLAN IDs in accordance with the aggregated VLAN configuration values 
stored in the switch that performs the classification. 



1 14. The method of claim 1 



3, wherein the tag is an 802. 1Q frame tag. 
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hod of claim 12, wherein the classification comprises obtaining the 
sub-VLAN ID And the super-VLAN ID from the aggregated VLAN configuration values 



stored in the s 1 



16. 



A/itch that performs the classification. 
The method of claim 12, further comprising: 

preventing the data packet originating from the sub-VLAN from being 




forwarded to a jfferent sub-VLAN using a modified MAC address learning rule. 

'17. The method of claim 17, wherein the modified MAC address learning rule 
comprises a MA<£ address entry in a table stored in the switch performing the 
classification, wherein the MAC address entry is added for each of the sub-VLAN and 
the super-VLAN wheta the MAC address is learned from the sub-VLAN, and wherein 
the MAC address entry\is added for all of the plurality of sub-VLANs in the 
aggregated VLAN configuration and the super-VLAN when the MAC address is 
learned from the super-VLAN. 



1 18. An article of manufacture comprising a machine-accessible medium having 

2 stored thereon a plurality of instructions for aggregating multiple VLANs in a 

3 metropolitan area network, comprising\ 

4 classifying a data packet originating from a sub-VLAN in accordance with an 

5 aggregated VLAN configuration, the aggregated VLAN configuration associating the 

6 sub-VLAN with a sub-VLAN ID and a super-VU\|M ID; 

7 classifying a data packet originating from a ^iper-VLAN in accordance with the 

8 aggregated VLAN configuration, the aggregated VLAN configuration further 

9 associating the super-VLAN with a super-VLAN ID and a| least one of a plurality of 
10 sub-VLAN IDs; 
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1 1 exchanging the sub-Vty\N id for the super-VLAN ID before forwarding the 

12 data packet to a MAN and exchanging the super-VLAN ID for the at least one sub- 

13 VLAN ID before forwarding the dtya packet to a customer associated with the at 
least one sub-VLAN ID. 

19. A metmod for controlling processing of data packets in a switch connected to a 
metropolitan area network (MAN), comprising: 

3 propagating a data packet originating from one of a plurality of sub-VLANs, 

4 the plurality of sub-VLANs belonging to a super-VLAN; 

5 exchanging a VLAN ID identifying the originating sub-VLAN with a super- 
s' 6 VLAN ID identifying the super-VLAN to which the originating sub-VLAN belongs; 
r\ 7 controlling the processing of the data packet to the MAN in accordance with 
;tj 8 the exchange d super-VLAN ID and a destination Media Access Control (MAC) 

P 9 address specified in the data packet. 

□ 1 20. An edc e switch for controlling processing of data packets in a metropolitan 
Q 2 area network WAN, comprising: 

a port for receiving a data packet on an edge switch originating from one of a 
plurality of VL\Ns, the plurality of VLANs associated with a super-VLAN; 

a means for assigning a VLAN ID to the data packet that identifies the 
originating VLAN; 

a verifier means for verifying that the assigned VLAN ID matches a value in a 
edge switch; 

a controller for controlling the processing of the verified data packet to 
exchange the verified VLAN ID for a super-VLAN ID that identifies the associated 
super-VLAN; and 



memory of the 



a meanslfor propagating the processed data packet to the MAN. 
Yip et al. - Method and System to Aggregate Multiple VLANs in a MAN 

EL034438983US DJC/mwb 

-20- 



1 

2 
3 




% 3 

"t 4 

ffl 5 

O 6 

□ 7 

O 8 
' = 9 

10 

11 

12 



Attorney Docket Ref: 002WP?P030 

21 . The edge switch of claim 20, wherein the means for assigning the VLAN ID 



includes deriving the id 
based on the contents 



entity of the super-VLAN associated with the originating VLAN 
Df the data packet's source Internet Protocol (IP) address. 



1 22. The edge switch 

2 includes obtaining the 



of claim 20, wherein the means for assigning the VLAN ID 
VLAN ID from a header encapsulating the data packet. 



^ 1 23. The edge switclji 
2 switch is comprised of 



of claim 20, wherein the value in the memory of the edge 
an aggregated VLAN configuration. 



^ 1 24. The edge switc h of claim 20, further comprising 



a means for ve 
value in a memory of 

the means for 
including a means to 
identifies the destina 



a port for receij/ing the data packet from the super-VLAN; 
a means for assigning a super-VLAN ID to the data packet that identifies the 
originating super-VLAN; 

rifying that the assigned super-VLAN ID matches a second 
he edge switch; 

:ontrolling the processing of the verified data packet further 
exchange the verified super-VLAN ID for a VLAN ID that 
ion VLAN; and 

the means for propagating the processed data packet further including a 
means for propagating the data packet to a customer associated with the 
destination VLAN. 
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